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® An encryption system based on Chaos theory. 

€) 

An encryption system and method based on -the mathematics of Chaos theory, which provides protection of 
data from unauthorized modification and use during Its storage and transmission. At Its core are nonlinear 
equations which exhibits random, nolse-like properties, given certain parameter values. When iterated, a periodic 
sequence is produced with an extremely long cycle length. A domain transformation process is then used to 
convert the floating-point Iterates into binary form for summation with the digital data to be protected. The result 
Is an encrypted message that cannot be modified, replaced, or understood by anyone other than the intended 
party. The use of Chaos theory in combination with the domain transformation process results in an easily 
implemented cryptographic system with extremely robust cryptographic properties. The concepts of the present 
invention also lend themselves well to either hardware- or software implementations. The cryptographic system of 
the present invention may be employed to encrypt and decrypt sensitive information, to authenticate data and 
video links, or similar applications. It can also be used to provide a simple hash function for the secure storage 
of passwords in a computer system. Its simplicity, requiring only floating-point operations at its core, allows a 
lower cost and higher performance product with cryptographic security equivalent to conventional cryptographic 
systems. 
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BACKGROUND 

The present invention relates generally to encryption systems, and more particularly, to an encryption 

''T'S:ST^^^ eavesdropping and Interception. l.e two 

orinSlS^^^^^ unauthorized disclosure) and integrity (to prevent unauthorized 

SS^ioTH^^^^^^ available to provide this protection, but they tend to be complex 

ZT^raZ^^^i l^^rr^^ Aldeman (RSA) cryptographic systems are the best '"'ovvn and r^sl 
wide^ used pr^ucts available for comparison. The Data Encryption Standard and *e P'^^" 
^1 sfrSllar^nctlons and can generally be used in the --.-P?-^^^,^!^''^^^^^^^^ 
hardware or software versions, allowing flexibility for the application developer. The disadvantage with 
Xa% versions of the DES is that its algorithm is based on a complex state machine, and state machmes 
do not translate well into software. Computers are much better suited to operations on 8-. 16-. or 32-bit 
iorSs Tnd DES Tequ 1 intensive operations at the individual bit level. One DES implementation «,at was 

~ H'?n= tjt i:TSt=a::s = 

™Sti2irs^J t«X it may not be in the future. Its strength is based on the computatona ly 

function. S represents a more robust system The present invention overcomes the problems associated with 
the Data Encryption Standard and RSA cryptographic systems. 

SUMMARY OF THE INVENTION 

This invention is an encryption system based on the mathematics of Chaos theory, which provides 
protSr^TdatTf;om unaSzed m'odiflcatlon and use during its storage and transmis^n. At its -e js 
, a nonlinear equation which exhibits random, nois^like properties when ^^'^^^ Pf^^f ^^.^^f.^^^^^.^J 
narticular one such nonlinear equation is the logistic difference equation: Xn., - ux„(l-Xn). which is cnaotic 
f^cer^^ ; valerofT U acts as a tuning parameter for the equation. When iterated a perjjjc 

sequence is produced with an extremely long cycle length. A d^^^^'" ^f^^ ^^^^ 

to convert the floating-point iterates into binary form for summation witt, the d.grtal '^^'^^^^^■V^ 
result is an encrypt^ message which cannot be modified, replaced, or understood by anyone other ttian 
Settended SJ^lr^ The use of Chaos theory in combination with the domain transformation process results 
in a cryptographic system with extremely robust cryptographic properties^ state machine 

A simple mathematical formula with complex properties is used instead of a complex stale "^achine 
with coTDlex properties This allows faster operation, while at the same time reduces the possibility o a 

recovery of the key. In fact, even when the conditions most favorable to a crypfanalyst are a"owea Key 
prSn L maintained when other more conventional ^^^^^^^^ '>'^^'^, 

a unique one-way domain transformation process which results in the loss of '2^""^*^°" J*^! 
cryp^lysfs success. The combination of these techniques results in a cryptographK: syftem 1*J 
Sme? simple to implement, yet is cryptographically very robust It also lends itself well to erther a 

invention may be employed to protect sensitive inforrnation c. 
to aleSTdi and video links, or to support secure computer systems, or similar aPP"cat.ons. tt can 
S^J^TsSlo provide a simple hash function for the secure storage ^'^^^^^^f '^..^P"^^^^^^^ 
Its Simplicity, requiring only floating-point operations at its core allows a lower cos* and higher pertomiance 
pLuct with cryptographic security equivalent to the most widely used cryptographic systems. 
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The various features and advantages of the present invention may be more readily understood with 
reference to the following detailed description taken in conjunction with the accompanying drawings 
wherein |j|<e reference numerals designate tike structural elements, and in which: 

FIG. 1 is a flowchart showing an encryption process in accordance with the principfes of the present 
invention; ^ 

FIG. 2 is a flowchart showing a decryption process In accordance with the principles of the present 
invention; 

FIG. 3 is a diagram showing an encryption and decryption system without error extension in accordance 
with the principles of the present invention; 

FIG. 4 is a diagram showing an encryption and decryption system with error extension in accordance 
with the pnnciples of the present invention; and 

FIG. 5 is a functional block diagram of the encryption and decryption system In accordance with the 
principles of the present invention. 

75 DETAILED DESCRIPTION 

By way of introduction, Chaos theory is an evolving field of mathematics that studies the behavior of 
nonlinear systems. When properly initialized, these systems exhibit chaotic behavior when Iterated Chaotic 
behavior may be described as a form of steady state behavior which is aperiodic and as such appears to 
20 have noise-hke characteristics. This behavior, although aperiodic. Is bounded, and while the chaotic 
trajectory never exactly repeats itself, the trajectory is completely deterministic given the exact initial 
conditions and parameter values. These chaotic properties are used to generate an aperiodic sequence for 
use as the keystream in the encryption system of the present invention. 

It Is useful to draw an analogy with a common linear sequence generator. Both the present invention 
and the linear sequence generator produce pseudo-random sequences from a given starting point and both 
have a finite cycle length. However, the frequency spectrum of a chaotic system is continuous and 
broadband, whereas the linear sequence generator is discrete. This property offers significant advantages 
when used in an encryption system, since its statistical properties are more noise-like when small sections 
of the entire state space are considered. For example, the statistical performance of a 1.000 bit sample 
taken from a linear sequence generator with 10 million states will not appear very noise-like due to the small 
percentage of available states used. A chaotic system under the same conditions would appear more noise- 

The logistic difference equation is one of the simplest nonlinear functions which exhibits chaotic 
charactenstics, and is the first of two processes used in the present invention. Although this function is used 
in the following description, it is only one of a number of functions with similar properties. The concepts of 
the present invention permit any of this entire class of functions to be used. The logistic difference equation 
IS defined as: x^., = ux^(l-x,), where u is a constant between 0.0 and 4.0 and x is the iterated result 
between 0.0 and 1.0. Approximately 90% of u values between 3.57 and 4.0 result in chaotic behavior, and 
the particular value selected remains constant throughout the Iterations. An initial value of x„ is chosen to 
40 begin the process. An extremely minor change to this initial value will result In a completely different 
sequence; 0.1000000000 will produce a different sequence than 0.1000000001. The initial values simply 
determine different starling positions in the same very long sequence for any given value of u 

It has been mathematically proven that operation in the chaotic region will produce an aperiodic 
sequence, making it appear as rf an infinite cycle length can be obtained. Reference is hereby made to the 
45 thesis by Dana Reed entitled "Spectrum Spreading Codes from the Logistic Difference Equation " 
submitted to the Department of Electrical Engineering and Computer Science at the University of Colorado 
having a reference number of LD1190.E54 1989M R43. the contents of which are Incorporated herein by 
reierence. 

In practice, however, the floating-point precision of the machine implementation determines the 
rnaximum cycle length that is available. With the 12-digit precision typically available on most computers, 
the maximum cycle length vrould be on the order of 10« iterates. An IBM-PC with a math coprocessor 
coM|d produce about 10« iterates. Due to the number of variable parameters, however, it is extremely 
difficult to determine an exact cycle length. This has both advantages and disadvantages for an encryption 
application. For comparison, the Data Encryption Standard has a cycle length of about 10^« states. To 
Illustrate the magnitude of these numbers, a system implementing this algorithm and operated continuously 
at a 1 Megabit/sec rate would not repeat for 11.6 days with 10'^ iterates, and for 317.000 years with 10'^ 
Iterates. Given the same conditions, the Data Encryption Standard would not repeat for 317 years. This 
Illustrates the flexibility of the present invention, since extremely long cycle lengths can be obtained by 
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Simply increasing the precision of the '^P ^^'^^^^""^ ^,,0^ rt to be used within an encryption 

Two characteristics of the above log-sfc drfference e^ua^n ^^^j^jg^t^^^^ generates an 

system. Rrst. for any given u and Jf9'^<^„f "^^fj^^„!5"f^^^ 

eLemely large number of uniformly "'^"J^J '^^^'^f J^^^ 

sequence, allowing u to be used as ti^ "key- a^^^^ Since the 

The second function used .n P^^^'J q and 1.0. its iterates must be converted to a 
logistic difference equation produces 'f.^^"^"^^.^ place This is accomplished with a two-stage 
binary 0 or 1 before encryption of ^gta" ^ lake P^^^^ ^ j^e second stage 

numerical filter process. The first stage '^^.f i^If Sn^tt ^d midrange are converted into O's. 
converts them into a binary 0 or 1 . Iterates essentially a transforma- 

and iterates between the midrange and upper limit are '7° 'J • 

L^rom the continuous domain to the d j^t^^^^^^^^ 

This transfonnfiation results in significantly greate cn^'Wj between 0 4 and 0.6 to the second 
difference equation alone. For example^by ^^^'^^ ^^^.^^T^ Ss^rearu. Due to the 
stage, a significant number of '"^^-^.^'^^/f 'f^f J^l ^SconSS^^ erf iterates, the actual x„ 

irreversible nature of this transformation and *f °* A,'^^S?eT denying a cryptanalyst of this 

the benefit of increased execution speed, and '^^J^^'^^^^^''^,^^,^^ of a typical implementation 

rr: i^os^rrrrr^^^^^^ --^^^ 

"'"'^vl^tlefrce to P.O. 1. which illustrates the ^"^^^^ 

parameter u. the upper and lower of Jhe itera^ S^' he u^p^ir^^^^^^ is Sen calculated 
as the "cryptographic key" m step 20. The -^^^P^'"* '^^^^^"^ ^Z^om starting point is then created in 
in step 21 for later use by the domain ^^^^^^^^ will be the initial 

step 22 which is nonrepealable and •~"P'«^'^*^'''^ ^^.Jl^" ^^^^^^ rnessage. Examples are the 

value of x„, and is saved so that it P-J^^J^^^^":^^^^^^^ previously agreed 

time and date when encrypton ,s J^„^3 ^^^^^ H^ratJd in step 23 for the run-up amount 

upon by the encryptor and decryptor. The Jpxi tterate is then generated in step 24 and 

sUed in the key to determine the ^^^^^^^a^PjS r^ge ^^^s ^IrtS into a binary 0 or 1 in 
tested in step 25 to detennnme if it is within Wie ^pecmea range . repeating steps 24 and 25. 

step 26. otherwise it is ignored and a new iterate - calculated and tested by ^^pe g P^ ^^^^^^^ 
The resulting binary value is summed modulo-2 m ^«^P f; !:""J;^^ f^jg ^cess is repeated until the 
creating a ciphertext bH which can eittier ^^^^'^^^'"r^';!^'^^;^,^^^^ ^a'S ,oop 29 Although this 
entire message has been encrypted ^ ^'J^:.^^^^^^ also he encrypted by 

description performs encryption on a * Jf^'^' 

and the midpoint is cateulated in step 41. Using .^"^f ^r/^^"^^^^^ in step 42. Using 

example, the initia. value erf '^-"I^J-^X^^^^^^ message or cateulated 

50 system-specific parametere, the ''"1^?' ^^"^ '"^^ ^ upon procedure. As before, the equation is initialized 

^rrr « «. ^^^^ 

55 illustrated by loop 50 which corresponds to '°°P ^0 ^ • ^ procedure may be used 

A typical software '-Pl^-^^):^" ^J^^^^^^^^^^ S^ipherte^ is used for "dala". 

T.S'Ss^Srar;;^:^^^^^ -d decrypSon system 60. T^ system 60 uses a 



4 



EP 0 467 239 A2 



cryptographic key 61 and a randomly created Initial value 62 within a key stream generator 63 comprised of 
the logistic difference equation and domain transformation process. The output of the process 63 is coupled 
to a moduIo-2 adder 64 that combines the message to be encrypted with a binary value generated by the 
key stream generator 63 to produce encrypted ciphertext. The ciphertext is then communicated to the 

5 decryption portion of the system 60. The cryptographic key 65 and received initial value 66 are used by a 
keystream generator 67 comprising the logistic difference equation and donr^ain transfonmation process. The 
output of the keystream generator 67 is coupled to a modu!o-2 adder 68 that combines the message to be 
decrypted with the binary value generated by the keystream generator 67 to recover the original message. 
The above-described system 60 and methods have no error extension, so that a single bit error in the 

10 received ciphertext results in one incorrect bit in the decrypted message. A minor modification to the 
system 60 and its processes, however, provide an error extending mode of operation. A diagram of this 
modified system 60a is shown in FIG. 4. Keystream bits are fed sequentially into a first-ln-first-out array 72 
by way of a moduIo-2 adder 71. instead of being immediately used. As each bit of the message is 
encrypted, the ciphertext is modulo-2 added with a new keystream bit and fed back into the array. After a 

75 short delay, it is then modulo-2 summed again with another bit of the message. Similarly, the decryption 
portion of the system 60a also includes an additional adder 74 and a FIFO array 75, which operate as 
described above. In this case, a single bit error in the received ciphertext will result in a number of errors as 
it propagates through the array. For example, a 4-element array produces 16 errors for each ciphertext bit. 
Assuming that the following ciphertext is received error-free, recovery of the original message then 

20 continues. 

Implementing the above-described algorithm in hardware offers the benefits of increased speed and 
greater protection against reverse engineering and unauthorized modification. Any hardware implementation 
may he used, including off-the-shelf microprocessors and digital signal processors, gate arrays, program- 
mable logic devices, or full custom integrated circuits. For descriptive purposes, only the gate array option 

25 is discussed below. It performs all of the functions previously discussed, and its arithmetic logic unit may he 
customized in a conventional manner to provide the desired level of floating point precision. A functional 
block diagram of the hardware system 80 is shown in FIG. 5. At its core is an arithmetic logic unit 81 
capable of floating point operations to the precision desired. An arithmetic logic unit controller 82 
implements the necessary control logic In a conventional manner to iterate a variety of predefined chaotic 

30 equations, and provides the numerical filter and binary conversion functions. Since the arithmetic logic unit 
81 needs to produce many iterates for each keystream bit when narrow filters are used, a separate system 
clock at an operating frequency greater than the data clock is provided to maintain high encryption rates. 
The remaining portions of the system 80 provide support functions, and include a randomizer 83, key 
storage memory 84, an I/O Interface 85. a control sequencer 86 and a modulo-2 adder 87. However, it is the 

35 arithmetic logic unit 81 and arithmetic logic unit controller 82 which implement the functions performed by 
the present invention. The I/O Interface 85 communicates with a host processor (not shown), and the control 
sequencer 86 directs the overall operations of the system 80. The key storage memory 84 Is provided to 
store multiple keys, and the randomizer 83 provides random number generation for algorithm initialization. 
The same system 80 may be used for both encryption and decryption since the process Is symmetric. 

40 As mentioned above, I/O configurations and the randomization process are not specified herein since they 
are specific to each particular host system. Although the algorithm Is best suited to processing serial data, a 
parallel architecture may he Implemented by including the appropriate serial-to-parallel converters. 

A software program embodying this invention was developed to investigate its properties. All critical 
functions and processes claimed herein were implemented, and encryption and decryption of sample 

45 messages were successfully demonstrated. In addition, a variety of standard statistical tests were performed 
on samples of 1 million keystream bits, using many combinations of the variable parameters. Tables 1 and 
2 illustrate the distributions of typical 1 million bit samples. They Indicate that the keystreams were 
statistically unbiased, and that totally different keystreams were obtained from minor changes to the initial 
conditions. Auto-conrelation and cross-correlation tests were also performed, which confirmed that the 

60 keystreams were indeed nondeterministic. For comparison. Table 3 Illustrates the performance of a 
standard Department of Defense (DoD) randomizer that uses a random physical process as its noise 
SQurce. It Is clear that the performance of the present invention compares favorably. This randomness is an 
essential property of all cryptographically robust encryption systems. 

55 
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Table 1 

ji = 3.9996, X = 0.1. = 216.2 
lower limit = 0.49, upper limit = 0,51 
Mono bit = 0.5000 First Delta = 0.4998 Second Delta = 0.4999 Third Delta = 0.5003 
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Table 2 

= 3.9996, X = 0.1000000001. = 245.9 
lower limit = 0.49, upper limit = 0.51 
Mono bit = 0.5000 First Delta = 0.4999 Second Delta = 0.4998 Third Delta = 0,4997 
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Table 3 

The output from a DoD approved random source, = 283.2 
Mono bit = 0.4994 First Delta = 0.5001 Second Delta =: 0.5002 Third Delta 0.4997 
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468 


517 


491 


469 


464 


471 


461 


AO: 


483 


472 


450 


511 


497 


476 


498 


493 


519 


473 


497 


501 


500 


482 


520 


532 


BO: 


529 


492 


499 


511 


458 


474 


465 


521 


504 


463 


512 


491 


451 


451 


441 


488 


CO: 


488 


482 


498 


486 


451 


468 


539 


491 


525 


472 


498 


521 


468 


497 


478 


488 


DO: 


537 


495 


538 


510 


509 


484 


510 


492 


523 


499 


479 


481 


464 


458 


474 


496 


EO: 


482 


472 


474 


502 


488 


469 


499 


510 


504 


489 


504 


463 


466 


450 


498 


510 


FO: 


494 


475 


479 


500 


497 


425 


517 


488 


486 


484 


458 


513 


510 


529 


473 


438 



Run Count Zeros Ones Expected Value 

1 125202 124815 125000 

2 61970 62780 62500 

3 31213 31416 31250 

4 15720 15366 15625 

5 7880 7767 7812 

6 4062 3918 3906 

7 1946 1951 1953 

8 996 998 976 

9 492 505 488 

10 234 218 244 

11 115 99 122 

12 49 65 61 
>12 70 52 61 



Thus there has been described a new and improved encryption system that is implemented using the 
concepts of Chaos theory. It is to he understood that the above-described embodiments are merely 
illustrative of some of the many specific emt)odiments which represent applications of the principles of the 
present Invention. Clearly, numerous cind other arrangements can be readily devised by those skilled in the 
art without departing from the scope of the invention. 
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APPENDIX I 



Cod? 
BEGIN 
geckey; 

midpoint: = (upper„limit + lower_limit)/2 
randomize; 

x: = random_value; 
for temp = 0 to run_up 

x: = u'* X - * X * x; 
repeat 
repeat 



x:= 



Comments 

{key contains fields for ^ 
{upper.Iimit, lowmJimit, run-up^ 
{calculate midpoint 
{caU a routine to generate a random 
(starling point 

{assign random value as the inidal value 
{inidalize by iterating for the amount 
{specified by run*up 

{repeat for entire message 

{iterate unul x is between lower and 

{upper limits 



x x; 

until (x > lowerjimit) and (x < upper Jimit) 



if X > midpoint then keystream : = 1 

else keystream : = 0; 
output : = keystream XOR data; 
until end of message; 
END 



{conveit to binary 

{encrypt 
{done 



Claims 

1. A method of encrypting data comprising the steps of: 

generating a random value having a selected mathematical precision; 

generating an initial state of a predetermined chaotic equation by iterating with the random value 
and a key value having a selected mathematical precision, for a selected numt>er of iterations; 

iterating the chaotic equation to generate a periodic sequence of encrypting iterates having an 
extremely long cycle length; 

performing a domain transfonmation by converting the encrypting iterates into binary form; and 

summing the encrypting iterates in binary form with digital data to be encrypted to generate 
encrypted data. 

2J The method of Claim 1 wherein the step of iterating the chaotic equation further comprises the step of: 
reiterating the the chaotic equation to generate a periodic sequence of encrypting iterates whose 
values are within a selected range. 

3. The method of Claim 1 wherein the predetermined chaotic equation comprises the logistic difference 
equation Xn-^ i = ux„(1-Xn). where u is a constant and x is an iterated result 
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4. The method of Claim 1 wherein the step of Iterating the chaotic equation further comprises selecting a 
desired mathematical precision for the iterating process to alter the periodic sequence of encrypting 
iterates. 

5 5. The method of Claim 1 wherein the step of iterating the chaotic equation comprises the step of iterating 
the chaotic equation using a discontinuous set of encrypting iterates. 

6. The method of Claim 1 wherein the step of iterating the chaotic equation comprises the step of 
periodically perturbing the iterates to add a further discontinuity in the binary encrypting iterates 

10 generated by the domain transformation step. 

7. The method of Claim 1 wherein the step of iterating the chaotic equation further comprises the steps of: 

feeding back the encrypted data; 

summing the encrypted data with the periodic sequence of encrypting iterates to generate a 
75 second set of encrypting iterates; 

delaying the summed second set of encrypting iterates for a selected time period; and 
summing the delayed second set of encrypting iterates with digital data to be encrypted to 
generate encrypted data. 

20 8. The method of Claim 1 further comprising the steps of: 

iterating the chaotic equation and performing the domain transfonmation a selected number of 
times; and 

then summing the encrypting iterates with digital data to be encrypted to generate encrypted data. 

25 9. A method of decrypting data encrypted in accordance with the method of Claim 1, said method 
comprising the steps of: 

receiving encrypted data that is to be decrypted; 
receiving the random value. 

generating an initial state of the chaotic equation by iterating with the random value and a key 
30 value, for the selected number of iterations; 

iterating the chaotic equation to generate a periodic sequence of decrypting iterates having an 
extremely long cycle length; 

performing a domain transformation by converting the decrypting iterates into binary form; and 

summing the decrypting iterates in binary form with the encrypted digital data to be decrypted to 
35 generate decrypted data. 

10. The method of Claim 9 wherein the step of iterating the chaotic equation further comprises the step of: 

reiterating the the chaotic equation to generate a periodic sequence of decrypting iterates whose 
values are within a selected range. 

40 

11. The method of Claim 9 wherein the predetermined chaotic equation comprises the logistic difference 
equation Xn+t = UiXn(l-Xn), where u is a constant and x is an iterated result. 

12. The method of Claim 9 wherein the step of iterating the chaotic equation further comprises the steps of: 
45 summing the encrypted data with the periodic sequence of decrypting iterates in binary form to 

generate a second set of decrypting iterates; 

delaying the second set of decrypting iterates for a selected time period; and 

summing the delayed second set of decrypting iterates with encrypted data to be decrypted to 

generate decrypted data. 

60 

13^ The method of Claim 9 further comprising the steps of: 

I iterating the chaotic equation and performing the domain transformation a selected number of 
times; and 

then summing the decrypted iterates with encrypted data to generate decrypted data. 

55 

14. A method of encrypting data comprising the steps of: 

generating a random value having a selected mathematical precision; 

generating an initial state of a predetermined logistic difference equation by iterating with the 
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random value and a key value having a selected mathematical precision, for a selected number of 
iterations; 

iterating the logistic difference equation to generate a periodic sequence of encrypting iterates 
having an extremely long cycle length; 
5 performing a domain transformation by converting the encrypting iterates into binary form; and 

summing the encrypting iterates in binary form with digital data to he encrypted to generate 
encrypted data. 

15. The method of Claim 14 wherein the step of iterating the logistic difference equation further comprises 
10 the step of: 

reiterating the the chaotic equation to generate a periodic sequence of encrypting iterates whose 
values are within a selected range. 

16. The method of Claim 14 wherein the logistic difference equation comprises the equation Xn+i = ux„(1- 
;5 Xn), where u is a constant and x is an iterated result. 

17- The method of Claim 14 wherein the step of iterating the logistic difference equation further comprises 
adjusting the mathematical precision of the random value and key value to adjust the cycle length of 
the periodic sequence of encrypting iterates. 

20 

18. The method of Claim 14 wherein the step of iterating the logistic difference equation comprises the 
step of iterating the logistic difference equation using a discontinuous set of encrypting iterates. 

19. The method of Claim 14 wherein the step of iterating the logistic difference equation comprises the 
2B step of periodically perturbing the iterates to add a further discontinuity in the binary encrypting iterates 

generated by the domain transformation step. 

20. The method of Claim 14 wherein the step of iterating the logistic difference equation further comprises 
the steps of: 

30 feeding back the encrypted data; 

summing the encrypted data with the periodic sequence of encrypting iterates to generate a 
second set of encrypting iterates; 

delaying the summed second set of encrypting iterates for a selected time period; 

summing the delayed second set of encrypting iterates with digital data to be encrypted to 
35 generate encrypted data. 

21. The method of Claim 14 further comprising the steps of: 

Iterating the logistic difference equation and performing the domain transformation a selected 
number of times; and 

40 then summing the encrypting iterates with digital data to be encrypted to generate encrypted data. 

22- A method of decrypting data encrypted in accordance with the method of Claim 14, said method 
comprising the steps of: 

receiving encrypted data that is to be decrypted; 
45 receiving the random value. 

generating an initial state of the logistic difference equation by iterating with the random value and 
a key value, for the selected number of iterations; 

iterating the logistic difference equation to generate a periodic sequence of decrypting iterates 
having an extremely long cycle length; 
60 performing a domain transformation by converting the decrypting iterates into binary form; and 

summing the decrypting iterates in binary fonm with the encrypted digital data to be decrypted to 
generate decrypted data. 

23. The method of Claim 22 wherein the step of iterating the logistic difference equation further comprises 
55 the step of: 

reiterating the the logistic difference equation to generate a periodic sequence of decrypting 
iterates whose values are within a selected range. 
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24. Ttie method of Claim 22 wherein the logistic difference equation comprises the equation Xn+i = M-x„(1- 
Xn), where u rs a constant and x is an iterated result. 

25. The method of Claim 22 wherein the step of iterating the logistic difference equation further comprises 
the steps of: 

summing the encrypted data with the periodic sequence of decrypting iterates in binary form to 

generate a second set of decrypting iterates; 

delaying the second set of decrypting iterates for a selected time period; and 

summing the delayed second set of decrypting iterates with encrypted data to be decrypted to 

generate decrypted data. 

26. The method of Claim 22 further comprising the steps of: 

iterating the logistic difference equation and performing the domain transformation a selected 
number of times; and 

then summing the decrypted iterates with encrypted data to generate decrypted data. 

27. A cryptographic system comprising: 

a random number generator; 

a memory for storing one or more cryptographic keys; 

an arithmetic logic unit and controller means coupled to the random number generator and memory 
for iterating a predetermined chaotic equation using random numbers generated by the random number 
generator and the cryptographic key, and for generating a periodic sequence of iterates, and for 
performing a domain transfonnation by converting the periodic sequence of iterates into binary form; 

adder means coupled to the arithmetic logic unit and controller means for summing the iteraftes 
with digital data: and 

controller means for controlling the operation of and transfer of data between the random number 
generator, the memory, the arithmetic logic unit and controller means, and the adder. 

2a. The system of Claim 27 wherein the arithmetic logic unit and controller means iterates a chaotic 
equation comprising the logistic difference equation Xn+i = ux„(1-Xn), where u is a constant and x is an 
iterated result. 

29. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for adjusting the mathematical precision of the arithmetic logic unit to adjust the periodic 
sequence of encrypting iterates. 

30. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for iterating the chaotic equation using a discontinuous set of encrypting iterates. 

31. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for periodically perturbing the iterates to add a further discontinuity in the binary encrypting 
iterates generated by the domain transformation step. 

32. The system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for feeding back the encrypted data; 

means for summing the encrypted data with the periodic sequence of encrypting iterates to 

generate a second set of encrypting iterates; 

means for delaying the summed second set of encrypting iterates for a selected time period; and 
means for summing the delayed second set of encrypting iterates with digital data to be encrypted 

to generate encrypted data. 

33. ?rhe system of Claim 27 wherein the arithmetic logic unit and controller means comprises: 

means for iterating the chaotic equation and performing the domain transformation a selected 
number of times; and 

means for summing the encrypting iterates with digital data to be encrypted to generate encrypted 
data. 
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tion with the domain transformation process results 



in an easily implemented cryptographic system with 
extremely robust cryptographic properties. The con- 
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